This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/B_hvqyRv6JLmJCV1iTWTImKLqvw.roa File: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (raw, json) Hash identifier: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE= Subject key identifier: 07:F8:6F:AB:24:6F:E8:92:E6:24:25:75:89:35:93:22:62:8B:AA:FC Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Certificate serial: 019B7CEE0E4AF74589894FD34475EF6D5E67 Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/B_hvqyRv6JLmJCV1iTWTImKLqvw.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 178.255.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0e:4a:f7:45:89:89:4f:d3:44:75:ef:6d:5e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f86fab246fe892e624257589359322628baafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:ee:e4:aa:75:04:91:06:f2:a8:7a:be:24: 20:c8:2f:91:8a:3b:c6:57:9d:7f:71:a1:9f:3b:7d: a5:db:d7:fa:58:bb:b5:dc:9f:6a:4d:5f:04:12:c7: 01:33:de:e0:e3:a9:10:e3:55:5f:82:11:71:1d:2f: 95:bd:e2:4c:80:5c:6b:98:ad:24:38:43:9d:1c:1d: c5:52:60:a8:f8:39:64:51:44:d9:ca:9f:75:8f:93: c8:b5:bd:25:99:d7:f0:53:12:47:3f:fd:81:7c:92: 4c:d0:71:dd:dc:c3:52:36:a9:78:04:65:16:99:89: 60:c5:26:14:ae:a3:8d:15:4f:2f:33:9b:9f:9d:7a: 5e:00:3b:12:53:58:a4:60:e4:35:22:93:26:10:ae: 3c:2f:e3:bf:80:48:01:79:73:cf:bf:74:9a:1d:84: cb:b0:27:97:0e:aa:d0:f4:96:a7:95:98:71:f0:41: 30:9c:b4:2a:be:2f:e3:d9:24:ae:43:9a:04:a2:f2: d9:94:f6:e3:cd:20:08:9a:dd:5f:79:5f:c8:b9:60: 25:f6:7e:53:fa:fb:05:c1:7a:45:10:0b:e8:96:50: 89:b4:36:4a:12:50:ae:3f:b4:31:d0:b9:c3:ba:9d: 5f:68:1a:87:34:53:1c:da:1a:4a:ea:f2:e3:0f:84: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:6F:AB:24:6F:E8:92:E6:24:25:75:89:35:93:22:62:8B:AA:FC X509v3 Authority Key Identifier: keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/B_hvqyRv6JLmJCV1iTWTImKLqvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.241.0/24 Signature Algorithm: sha256WithRSAEncryption 94:d5:e5:ef:59:6e:c0:2c:36:96:5a:44:f5:2d:11:de:3b:f8: 4e:7e:96:8b:d3:7f:22:80:bf:6e:4b:8e:33:66:5d:e3:5a:c8: f7:e3:80:3e:bf:d1:fd:91:eb:31:9e:71:36:f4:1b:46:7c:d6: 60:25:59:53:9d:42:30:db:65:0a:2d:93:d6:0e:94:1c:6e:62: da:e3:19:3d:ea:9f:d2:fd:4a:ce:2a:df:2a:cb:a3:d0:09:2e: e4:5d:b9:01:99:2f:19:ec:b6:f1:a2:15:9d:83:92:7b:c3:e5: 8f:41:71:6d:c2:4b:59:cb:e2:81:b5:a9:5a:e7:ca:6d:85:52: 85:3d:f6:ee:ce:b4:bd:db:a3:a7:f9:52:95:8b:a3:52:c7:38: 9b:88:91:81:11:57:1d:66:ad:6a:e8:99:81:ba:17:8f:47:c0: 43:41:9d:ae:6a:6a:f0:97:e0:08:9a:48:59:94:3c:1e:a1:d4: be:6e:9a:d3:26:e5:d0:f7:b8:c2:4b:36:80:24:0b:a5:22:e8: f6:12:08:5f:5b:3c:25:e2:23:41:e5:39:6d:b1:1b:66:d8:8c: bc:fc:a1:53:f7:e5:78:85:02:f1:9b:8d:9e:9a:16:07:de:57: 31:91:75:5e:8d:1b:91:c9:52:6c:38:ff:94:7f:cb:b9:53:7a: 57:e1:4a:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87g5K90WJiU/TRHXvbV5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWUyZjJkNWU3MDkzZmY4ZDQwMDNhMDJiN2QzZTEzMWNl NzBhMTIwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Y4NmZhYjI0NmZlODkyZTYyNDI1NzU4OTM1OTMyMjYyOGJhYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpnu5Kp1BJEG8qh6viQgyC+RijvG V51/caGfO32l29f6WLu13J9qTV8EEscBM97g46kQ41VfghFxHS+VveJMgFxrmK0k OEOdHB3FUmCo+DlkUUTZyp91j5PItb0lmdfwUxJHP/2BfJJM0HHd3MNSNql4BGUW mYlgxSYUrqONFU8vM5ufnXpeADsSU1ikYOQ1IpMmEK48L+O/gEgBeXPPv3SaHYTL sCeXDqrQ9JanlZhx8EEwnLQqvi/j2SSuQ5oEovLZlPbjzSAImt1feV/IuWAl9n5T +vsFwXpFEAvollCJtDZKElCuP7Qx0LnDup1faBqHNFMc2hpK6vLjD4TiqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAf4b6skb+iS5iQldYk1kyJii6r8MB8GA1UdIwQY MBaAFFBeLy1ecJP/jUADoCt9PhMc5woSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQt OThlOWUyNTEwYmI2LzEvQl9odnF5UnY2SkxtSkNWMWlUV1RJbUtMcXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81YTc3MzEtZWY1NC00NTAxLTg2ZjQtOThlOWUyNTEwYmI2 LzEvVUY0dkxWNXdrXy1OUUFPZ0szMC1FeHpuQ2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv/xMA0G CSqGSIb3DQEBCwUAA4IBAQCU1eXvWW7ALDaWWkT1LRHeO/hOfpaL038igL9uS44z Zl3jWsj344A+v9H9kesxnnE29BtGfNZgJVlTnUIw22UKLZPWDpQcbmLa4xk96p/S /UrOKt8qy6PQCS7kXbkBmS8Z7LbxohWdg5J7w+WPQXFtwktZy+KBtala58pthVKF PfbuzrS926On+VKVi6NSxzibiJGBEVcdZq1q6JmBuhePR8BDQZ2uamrwl+AImkhZ lDweodS+bprTJuXQ97jCSzaAJAulIuj2EghfWzwl4iNB5TltsRtm2Iy8/KFT9+V4 hQLxm42emhYH3lcxkXVejRuRyVJsOP+Uf8u5U3pX4Uol -----END CERTIFICATE-----Generated at Mon Jan 12 15:45:47 2026 by rpki-client